Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: V4maPbfvQWc1C2EgdOL4il169fv3pQWN0Q4ryTxcSMI=
Subject key identifier: 69:5D:7E:FF:FC:32:05:D5:A0:BC:7A:69:A3:4E:C8:C8:6C:A2:E0:87
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0197B6A1490FDEDECDCA806856389FD93067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0B10
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: wKVNW+q0Arwi3f0FznRuxQ0bEjrkbTPN2dk9oOPrtxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:49:0f:de:de:cd:ca:80:68:56:38:9f:d9:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=695d7efffc3205d5a0bc7a69a34ec8c86ca2e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:f0:8a:04:9b:db:4b:cb:0e:5c:f0:99:0f:
23:a3:60:91:e7:af:b0:2c:e5:36:e7:7f:0d:fc:eb:
ba:c2:a2:97:1a:f0:5d:ff:64:32:24:49:b7:84:cd:
e9:9d:f1:2f:3b:24:2b:ae:89:27:ab:d4:b0:01:bf:
12:7a:cf:a3:32:77:61:72:4a:90:45:ff:51:55:70:
0c:64:5e:72:90:8c:a1:a3:63:51:11:b4:f2:bb:18:
5d:6c:b3:d2:94:dd:d8:62:de:9b:1c:26:28:8c:29:
08:40:7a:a5:6e:db:2b:85:b6:7f:ce:4c:19:1c:91:
3c:59:3a:d8:8f:9d:8c:d4:5f:11:63:63:ce:bf:44:
22:20:9a:0d:15:a4:03:70:66:8a:22:a6:2b:5d:68:
04:d4:c6:99:c5:61:e0:48:4d:2b:2c:5b:1b:43:f3:
3b:10:69:6e:dc:f8:f9:da:73:11:ca:42:6c:37:54:
98:25:77:92:74:79:35:25:48:c0:8b:f2:87:07:31:
f9:41:aa:2c:92:92:b9:43:23:e3:c0:7b:b3:f8:13:
25:b3:66:20:92:b0:9a:7d:de:b4:9e:f4:46:1b:6f:
11:bc:cf:e5:a5:3d:64:c8:cc:10:e1:6d:2a:11:eb:
04:b2:57:d7:58:77:72:2d:d9:11:73:12:3b:30:12:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:7E:FF:FC:32:05:D5:A0:BC:7A:69:A3:4E:C8:C8:6C:A2:E0:87
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:97:12:0c:86:cb:79:35:5a:f2:36:04:ff:5b:c3:69:c0:
ac:a1:10:e3:c6:73:a6:6a:6a:b7:09:8f:36:d6:a4:1d:7f:01:
3c:28:66:5b:0f:a5:79:7e:eb:8e:09:e2:db:62:f7:94:5b:e5:
19:e4:15:86:ab:20:00:d4:9b:d1:f9:ee:c0:77:66:a9:49:e0:
6f:f3:51:e5:83:da:6c:99:c5:6e:1f:4b:aa:55:39:5c:97:a9:
df:aa:37:c9:07:34:ff:39:45:1b:42:3d:bb:0f:91:6a:ef:e9:
47:e6:70:e9:5c:e3:d8:54:c3:9a:2d:90:aa:85:82:07:d4:f6:
2b:a8:f9:2e:bd:ad:f8:3d:8e:44:ee:ea:a5:2c:df:13:c1:e4:
50:5e:3f:17:c2:3f:4e:6d:ee:ee:4a:c2:c0:cd:bf:d0:0d:f7:
99:2f:ca:64:f6:1d:b7:21:f0:7b:a4:f8:13:3e:5e:d0:dd:64:
e2:95:c5:4b:43:a4:e0:d3:88:59:c6:aa:b2:7e:34:1d:5e:c2:
0a:3c:cb:7a:8c:b3:a2:70:7c:a2:67:4f:40:0b:6c:f5:af:7c:
0d:a1:db:74:de:0f:0e:5f:94:cb:74:83:e9:28:bd:d2:7a:09:
7b:67:87:ac:61:c2:8d:c5:d1:c8:d5:4c:4e:5f:f6:53:b4:1d:
fc:cc:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:52 2025 by rpki-client